Data Map Domains, Collections and Permission Inheritance

Understand how Data Map domains and collections organise sources and assets while providing hierarchical access-control boundaries.

Data Map domains and collections serve two purposes: they organise the technical data estate and provide access-control boundaries for sources and assets.

Hierarchy

Collections can be nested beneath domains and parent collections. This allows organisations to reflect technical or organisational boundaries without flattening the whole estate into one list.

Permission inheritance

Permissions assigned to a domain or collection normally inherit to child collections. Administrators can use this to simplify access management, but should understand the effect before assigning broad roles high in the hierarchy.

Administrative responsibilities

  • Design a hierarchy that supports operational ownership.
  • Delegate Domain Administrator or Collection Administrator access appropriately.
  • Place sources in the correct collection.
  • Review inherited permissions.
  • Avoid granting broad access at the root when a narrower boundary will work.

Learning with Data SkyLab Studio

Follow practical Microsoft Purview and Data Governance learning from Data SkyLab Studio on YouTube.